Pith Number

pith:YJJ5DOM2

pith:2024:YJJ5DOM2WIICEKKTGZZ7V7MMJK

not attested not anchored not stored refs pending

System-Level Defense against Indirect Prompt Injection Attacks: An Information Flow Control Perspective

Chaowei Xiao, Ethan Cecchetti, Fangzhou Wu

arxiv:2409.19091 v2 · 2024-09-27 · cs.CR

Open paper page JSON Open Graph Bundle Merged state Verified badge What is a Pith Number?

Add to your LaTeX paper

\usepackage{pith}
\pithnumber{YJJ5DOM2WIICEKKTGZZ7V7MMJK}

Prints a linked badge after your title and injects PDF metadata. Compiles on arXiv. Learn more · Embed verified badge

Record completeness

1 Bitcoin timestamp

2 Internet Archive

3 Author claim open · sign in to claim

4 Citations open

5 Replications open

✓ Portable graph bundle live · download bundle · merged state

The bundle contains the canonical record plus signed events. A mirror can host it anywhere and recompute the same current state with the deterministic merge algorithm.

Cited by

25 papers in Pith

Prismata: Confining Cross-Site Prompt Injection in Web Agents

Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents

Adaptive Evaluation of Out-of-Band Defenses Against Prompt Injection in LLM Agents

GIF: Locally Sound Geometric Information Flow Control for LLMs

AOHP: An Open-Source OS-Level Agent Harness for Personalized, Efficient and Secure Interaction

Receipt and verification

First computed	2026-07-05T09:18:30.278479Z
Builder	pith-number-builder-2026-05-17-v1
Signature	Pith Ed25519 (`pith-v1-2026-05`) · public key
Schema	pith-number/v1.0

Canonical hash

c253d1b99ab2102229533673fafd8c4aa1bf06c11e1c446dd1617e170b44eea2

Aliases

arxiv: 2409.19091 · arxiv_version: 2409.19091v2 · doi: 10.48550/arxiv.2409.19091 · pith_short_12: YJJ5DOM2WIIC · pith_short_16: YJJ5DOM2WIICEKKT · pith_short_8: YJJ5DOM2

Agent API

Resolver JSON Graph JSON Events JSON Schema Signing key

Verify this Pith Number yourself

curl -sH 'Accept: application/ld+json' https://pith.science/pith/YJJ5DOM2WIICEKKTGZZ7V7MMJK \
  | jq -c '.canonical_record' \
  | python3 -c "import sys,json,hashlib; b=json.dumps(json.loads(sys.stdin.read()), sort_keys=True, separators=(',',':'), ensure_ascii=False).encode(); print(hashlib.sha256(b).hexdigest())"
# expect: c253d1b99ab2102229533673fafd8c4aa1bf06c11e1c446dd1617e170b44eea2

Canonical record JSON

{
  "metadata": {
    "abstract_canon_sha256": "84badbdeebc65350d06d3434ca3721a55ef11de117e53332832a5e306e2b8b53",
    "cross_cats_sorted": [],
    "license": "http://creativecommons.org/licenses/by/4.0/",
    "primary_cat": "cs.CR",
    "submitted_at": "2024-09-27T18:41:58Z",
    "title_canon_sha256": "a5fa0a31e243ceaecff303e3d2fe6d3cf2afd86f513ee0fb36cf8b1ff58d666d"
  },
  "schema_version": "1.0",
  "source": {
    "id": "2409.19091",
    "kind": "arxiv",
    "version": 2
  }
}